CVE-2013-1054

The unity-firefox-extension package could be tricked into destroying the Unity webapps context, causing Firefox to crash. This could be achieved by spinning the event loop inside the webapps initialization callback. Fixed in 3.0.0+14.04.20140416-0ubuntu1.14.04.1 by shipping an empty package, thus disabling the extension entirely.
References
Link Resource
https://launchpad.net/bugs/1175661 Exploit Vendor Advisory
https://ubuntu.com/USN-2743-3 Vendor Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:canonical:unity-firefox-extension:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*

Information

Published : 2021-04-07 13:15

Updated : 2021-04-19 09:17


NVD link : CVE-2013-1054

Mitre link : CVE-2013-1054


JSON object : View

CWE
CWE-404

Improper Resource Shutdown or Release

Advertisement

dedicated server usa

Products Affected

canonical

  • ubuntu_linux
  • unity-firefox-extension